topic Re: Virus activity on my daughters MSN Messenger Account in Norton Internet Security / Norton AntiVirus

Virus activity on my daughters MSN Messenger Account

grajackgor — Wed, 22 Apr 2009 20:35:37 GMT

My daughters account is sending unsolicited invites to contacts to visit various sites which have porn descriptions. NIS 2009 does not pick up any recent virus activity. what do I do. I presume my daughter picked up the infection from following a similar link or running an attachment. She can't remember though

Re: Virus activity on my daughters MSN Messenger Account

Quads — Wed, 22 Apr 2009 20:43:22 GMT

Could you send me a personal message with what exactly the link that you would click says??

Quads

Re: Virus activity on my daughters MSN Messenger Account

reese_anschultz — Wed, 22 Apr 2009 20:59:38 GMT

grajackgor, how do you know that your daughter's account is sending the invitations? Do see anything in the sent mail folder? Are you seeing NIS notifications of scanning outbound e-mail? Can you get a copy of one of the e-mails and provide the text without any links?

Re: Virus activity on my daughters MSN Messenger Account

Quads — Wed, 22 Apr 2009 21:21:08 GMT

The link goes to a site to enter your Msn username and password (Phishing??)

Try SuperAntispyware Free http://www.superantispyware.com/download.html Install, Update Definitions, and run a Full Scan

There is also http://download.cnet.com/Clean-Virus-MSN/3000-2239_4-10836867.html

Quads

Re: Virus activity on my daughters MSN Messenger Account

grajackgor — Wed, 22 Apr 2009 22:43:00 GMT

A number of her contacts have said they have received variations on the link I have just sent.As well I have an MSN Messenger account and have received 3 similiar but slightly different links all look dubious. It seems the link appears and then she goes off line just as quickly

(18:03) Hannah: PEOPLE WITH SAME INTEREST
[Removed] (18:03) Hannah is now Offline

[edit: removed link per the Participation Guidelines and Terms of Service. Please do not post links to pornographic websites.]

Message Edited by Tim_Lopez on 04-22-2009 03:43 PM

Re: Virus activity on my daughters MSN Messenger Account

grajackgor — Wed, 22 Apr 2009 21:39:04 GMT

I will run tomorrow and let you know

Bedtime in the UK

Thanks

Re: Virus activity on my daughters MSN Messenger Account

reese_anschultz — Wed, 22 Apr 2009 22:01:49 GMT

If your daughter's machine is infected, Quads has put you on the right track to solving the problem.

Another possibility is that some associate of your daughter's has been infected. Most malicious e-mail worms spoof the return address on e-mails using a random address from the infected machine's address book.

Re: Virus activity on my daughters MSN Messenger Account

Garret_Polk — Thu, 23 Apr 2009 22:34:13 GMT

It is also possible that someone has hacked the account and is sending emails from another location. You should change the password on the account and see if that helps.

Re: Virus activity on my daughters MSN Messenger Account

Allen_K — Thu, 23 Apr 2009 23:01:14 GMT

Garret_Polk wrote:
It is also possible that someone has hacked the account and is sending emails from another location. You should change the password on the account and see if that helps.

If her machine is also possibly infected, I would also recommend logging in from another machine to change the password. Also don't use the new password on the possibly infected computer until your sure there is no infection.

Re: Virus activity on my daughters MSN Messenger Account

grajackgor — Fri, 24 Apr 2009 18:23:44 GMT

Finally got round to downloading, updating and running the Superantispyware link that quad provided. It cam up with a whole load of tracking cookies including the Norton one. Nothing else though. I will try the other link this evening.

Re: Virus activity on my daughters MSN Messenger Account

grajackgor — Fri, 24 Apr 2009 19:46:55 GMT

I have run the MSN virus cleaner without coming up with anything

A point of clarification.

My daughter and I use the same computer but obvoiously have different Messenger Accounts. I made mine just to get a feel of what she was doing. She uses the Instant Messenging a lot. She began to get messages from her contacts that she had sent these dudious links. Some even swore at her for doing it. Somehow i got 3 messages from her with the same links, which she never sent. Something signed her in sent the link and then put her off line.

She has changed her password, but we have not signed her in since starting this thread. I have signed myself in with no obvious problem. I was thinking to shut down her current hotmail account and set up another one.

Any other suggestions

Re: Virus activity on my daughters MSN Messenger Account

grajackgor — Sat, 25 Apr 2009 07:24:52 GMT

I have actually found deep in the histories of my Norton 2009 histories that it did submit a suspicious link for further analysis which was a long one but did contain the words 237340-rad.msn-com-worm-help.html. This happened on the 7th of April

Does this help?

My daughter does admit to following on the first of april one of these links which came from a friend and entering her username and password. She cant remember whether she ran something or saved something.

Re: Virus activity on my daughters MSN Messenger Account

Stu — Sat, 25 Apr 2009 07:36:11 GMT

As some suggested your daughter might need to create a whole new account.